Privacy & Security

Learn how the Verida Network enforces privacy and security of user data within a decentralized environment

The Verida Private Data Bridge (this application) and Verida Private Data APIs (also part of this application) are deployed on the first iteration of Verida's Confidential Compute infrastructure. This infrastructure is designed to find the optimum balance between decentralization, security, privacy and performance.

Confidential Compute

This application is running within a confidential computation environment. This means that no-one, not even the underlying infrastructure provider or Verida can access any user data or view the computation occurring on the node.

The first iteration of Verida's Confidential Compute nodes are running inside Marlin Oyster Trusted Execution Environments (TEE). These nodes provide numerous security guarantees and capabilities:

The Verida Foundation is operating the first cohort of Confidential Compute nodes and will open up to node operators in the future.

Learn more:

Confidential Storage

Verida APIs integrate the Verida Client SDK within the secure enclave on each confidential compute node. User data is syncronized from the Verida network, decrypted and then loaded into memory for rapid access via API endpoints.

As such, user data retains all the security and privacy benefits of the Verida Network and user data never leaves the secure enclave, accept via user authorized API requests.

LLM Privacy

The large language models (LLM) currently used in the Verida APIs are not currently running in a Verida Confidential Compute secure enclave. Secure enclaves do not currently support GPU access which is necessary for performant LLM operations. The alpha release is using Amazon Web Services Bedrock for LLM access.

This is a temporary solution as we are collaborating with partners to enable LLM's to run efficiently and cost effectively within secure enclaves. While this is not perfect, we believe the AWS Bedrock privacy architecture and security model is an adequate compromise for the alpha release.

Private Key / Seed Phrase

You enter your private key or seed phrase into this application to connect to the Verida Confidential Storage network. Your credentials are stored in local storage and cached in the secure enclave for rapid access. You can clear them at any time by clicking your name / avatar in the top right of the page and logging out.

Source Code

The source code for the User Data APIs are open source and are contained within the Data Connector Server Github Repo